WGU D483 SECURITY OPERATIONS EXAM
SCRIPT VERIFIED QUESTIONS WITH
ACCURATE ANSWERS
●● Examples of confidentiality
Answer: A patron using an ATM card wants to keep their PIN number
confidential.
An ATM owner wants to keep bank account numbers confidential.
●● How can confidentiality be broken?
Answer: Losing a laptop
An attacker gets access to info
A person can look over your shoulder
●● Define integrity in the CIA triad.
Answer: The ability to prevent people from changing your data and the
ability to reverse unwanted changes.
●● How do you control integrity?
Answer: Permissions restrict what users can do (read, write, etc.)
●● Examples of integrity
,Answer: Data used by a doctor to make medical decisions needs to be
correct or the patient can die.
●● Define the availability in the CIA triad.
Answer: Our data needs to be accessible when we need it.
●● How can availability be broken?
Answer: Loss of power, application problems. If caused by an attacker,
this is a Denial of Service attack.
●● Define information security.
Answer: The protection of information and information systems from
unauthorized access, use, disclosure, disruption, modification, or
destruction in order to provide confidentiality, integrity, and availability.
●● Define the Parkerian Hexad and its principles.
Answer: The Parkerian Hexad includes confidentiality, integrity, and
availability from the CIA triad. It also includes possession (or control),
authenticity, and utility.
●● Authenticity
Answer: Whether the data in question comes from who or where it says
it comes from (i.e. did this person actually send this email?)
, ●● Confidentiality is affected by what type of attack?
Answer: Interception (eaves dropping)
●● Integrity is affected by what type of attacks?
Answer: Interruption (assets are unusable), modification (tampering with
an asset), fabrication (generating false data)
●● Authenticity is affected by what type of attacks?
Answer: Interruption (assets are unusable), modification (tampering with
an asset), fabrication (generating false data)
●● Utility
Answer: How useful the data is to you (can be a spectrum, not just yes
or no)
●● Possession
Answer: Do you physically have the data in question? Used to describe
the scope of a loss
●● Identify the four types of attacks
Answer: interception, interruption, modification, and fabrication
●● Interception attacks
SCRIPT VERIFIED QUESTIONS WITH
ACCURATE ANSWERS
●● Examples of confidentiality
Answer: A patron using an ATM card wants to keep their PIN number
confidential.
An ATM owner wants to keep bank account numbers confidential.
●● How can confidentiality be broken?
Answer: Losing a laptop
An attacker gets access to info
A person can look over your shoulder
●● Define integrity in the CIA triad.
Answer: The ability to prevent people from changing your data and the
ability to reverse unwanted changes.
●● How do you control integrity?
Answer: Permissions restrict what users can do (read, write, etc.)
●● Examples of integrity
,Answer: Data used by a doctor to make medical decisions needs to be
correct or the patient can die.
●● Define the availability in the CIA triad.
Answer: Our data needs to be accessible when we need it.
●● How can availability be broken?
Answer: Loss of power, application problems. If caused by an attacker,
this is a Denial of Service attack.
●● Define information security.
Answer: The protection of information and information systems from
unauthorized access, use, disclosure, disruption, modification, or
destruction in order to provide confidentiality, integrity, and availability.
●● Define the Parkerian Hexad and its principles.
Answer: The Parkerian Hexad includes confidentiality, integrity, and
availability from the CIA triad. It also includes possession (or control),
authenticity, and utility.
●● Authenticity
Answer: Whether the data in question comes from who or where it says
it comes from (i.e. did this person actually send this email?)
, ●● Confidentiality is affected by what type of attack?
Answer: Interception (eaves dropping)
●● Integrity is affected by what type of attacks?
Answer: Interruption (assets are unusable), modification (tampering with
an asset), fabrication (generating false data)
●● Authenticity is affected by what type of attacks?
Answer: Interruption (assets are unusable), modification (tampering with
an asset), fabrication (generating false data)
●● Utility
Answer: How useful the data is to you (can be a spectrum, not just yes
or no)
●● Possession
Answer: Do you physically have the data in question? Used to describe
the scope of a loss
●● Identify the four types of attacks
Answer: interception, interruption, modification, and fabrication
●● Interception attacks
